Post

RainbowSloth key stretching scheme #realworldcrypto

Q: Diff from SecureDrop? A: Focused on the first contact experience; using Tor is a red flag/signal; we don't support sending files, pivot elsewhere for that #realworldcrypto

Work with actual UX researchers; in-person user testing; #realworldcrypto

Speaking of SecureDrop, next up is 'SecureDrop Next Generation: Lessons from a Decade of Deployment', presented by Rowen Shane, Shannon Veitch #realworldcrypto

Uses Tor, PGP encryption, #realworldcrypt

Deployment/maintenance burden, physical security requirement, better encryption is available #realworldcrypto

What do we want from a next-gen SecureDrop? #realworldcrypto

Don't want to leave extra evidence behind #realworldcrypto

'The real way to use deniability is in combination with other security properties of the system; there are tradeoffs against authentication' #realworldcrypto

#realworldcrypto

Client is the Tor browser; no persistent state; server is 'just' an encrypted message queue; one time keys #realworldcrypto

Key bundles per-journalist #realworldcrypto

Hints #realworldcrypto

Specifics about the new SecureDrop protocol github.com/freedomofpre... #realworldcrypto

#realworldcrypto

Pros, and cons #realworldcrypto

#realworldcrypto

Different organizational profiles motivate different deployment types #realworldcrypto

Next steps, attachments, formal verification! github.com/freedomofpre... github.com/freedomofpre... #realworldcrypto

Q: Target a particular journalist, key exhaustion? A: Known, not seen in existing SecureDrop instances, so deferring doing anything for now, but there are approaches #realworldcrypto

How much are our assumptions and models actually based on the real world? #realworldcrypto

"Cryptography is also a social science unaware of itself." #realworldcrypto

#realworldcrypto